Determine the appropriate inherent risk profiles

Assignment Help Computer Network Security

Reference no: EM133705667

Question: For the Labs in this course, you will employ the FFIEC Cybersecurity Assessment Tool on a hypothetical case study organization. Using the tool, you will determine the appropriate inherent risk profiles and cybersecurity maturity levels for cybersecurity domains for the organization. You can, therefore, evaluate whether the organization's inherent risk and preparedness are aligned.

Step 1:Read Overview for Chief Executive Officers and Boards of Directors?to gain insights on the benefits to institutions of using the Assessment, the roles of the CEO and board of directors, a high-level explanation of the Assessment, and how to support implementation of the Assessment.

Step 2:Read the User's Guide?to understand all of the different aspects of the Assessment, how the inherent risk profile and cybersecurity maturity relate, and the process for conducting the Assessment.

Step 3:Complete Part 1: Inherent Risk Profile of the Cybersecurity Assessment Tool to understand how each activity, service, and product contribute to the institution's inherent risk.

Step 3:Complete the Inherent Risk Profile of the Cybersecurity Assessment Tool

In order to complete the Inherent Risk Profile using the FFIEC Cybersecurity Assessment Tool, you will need to get more information about the organization. After consulting with the relevant people within the organization, you have the following information:

The total number of internet service provider (ISP) connections is 25.
The unsecured external connections-number of connections, not users-is 14.
In the corporate wireless network, there are 778 users and 76 access points.
Multiple types of personal devices (including but not limited to iPads, iPhones, personal mobile devices, and laptops) are available to 14% of employees and allowed to connect to the corporate network.
There are seven third parties, and almost 150 individuals have access to the systems.
There are seven wholesale customers with dedicated connections.
There are 17 vendor applications supporting critical activities.
There are 101 vendor-developed applications supporting critical activities.
There are 309 technologies that support critical activities.
Several systems will reach end-of-life within 2 years.
There are a large number of open-source software (OSS) platforms that support critical operations.
There are almost 33,000 network devices.
Fifty-two third-party service providers store and process information that supports critical activities.
There are six cloud service providers.
The organization's website serves as a delivery channel for retail to the customers. The organization has social media pages.
Mobile applications have been used for retail customers.
ATM service is offered, but the machines are managed by a third party.
The organization issued debit and credit cards to 77,932 customers.
The organization issued 13,763 prepaid cards.
Emerging payment technologies are indirectly accepted.
The monthly, average, person-to-person transaction volume is 59,726.
The organization originates ACH debits and credits, with a daily volume of almost 4%.
The daily originated wholesale payment volume is almost 4%.
Wire transfers are offered through online and other channels. Daily volume increases up to almost 9% of total assets.
The company does not offer merchant remote deposit capture.
The gross daily global transaction volume is 2% of total assets on average.
The company does not offer treasury services.
The company does not offer trust services.
The company acts as a correspondent bank for 22 institutions.
The company does not offer merchant acquirer services.
The company does not host IT services for other organizations.
The company is open to discussions with mergers.
There are 23,589 employees.
There is some turnover in senior IT positions.
The level of turnover in administrators affects operations.
There are not frequent changes in the IT environment.
The company has locations in multiple regions of one country.
Data centers are in multiple regions of one country.
The company is under cyberattacks, and the volume is almost 200 per month.

Reference no: EM133705667

Questions Cloud

Create a study schedule : Are the projects or assignments large and unmanageable and Find a comfortable, but not too comfortable, place to work

Column is designed to help new nurses in their first year : This column is designed to help new nurses in their first year at the bedside-a time of insecurity, growth, and constant challenges-

Nurses increased influence and leadership : Opinion leaders identified top barriers to nurses' increased influence and leadership as not being perceived as important decision makers

What valuable points do you believe were most helpful : After reading the topic materials on classroom management, what valuable points do you believe were most helpful for classroom management?

Determine the appropriate inherent risk profiles : Determine the appropriate inherent risk profiles and cybersecurity maturity levels for cybersecurity domains for the organization

How does each proposed technology modality encourage patient : How does each proposed technology modality encourage patient engagement in an ethical, culturally sensitive, and inclusive way?

Creating an amazon elastic block store : Creating an Amazon Elastic Block Store (Amazon EBS) Volume and Demonstrating its Persistent Nature

Explain the concept of a knowledge worker : Explain the concept of a knowledge worker. Define and explain nursing informatics and highlight the role of a nurse leader as a knowledge worker.

How nurse informaticists and data or technology specialists : How nurse informaticists and/or data or technology specialists interact with other professionals within your healthcare organization.

User Account

All Pages